Your data, limited to what the service needs.

Who we are

Vault Competitions. Registered in England & Wales. Contact: support@vaultcomps.co.uk.

What we collect

Account and contact: name, email, phone number, email-verification status, hashed one-time sign-in and session records, age confirmation, and address if you win.

Competition and transaction: selected numbers, order IDs, amounts, and payment references. We do not store full card details.

Usage and security: IP address, device/browser data, timestamps, and server logs.

Communications: emails or support messages you send us and application email delivery records.

Marketing, where optional: consent history, current preference, and suppression record if you unsubscribe.

Why we use it

Contract: to run competitions, take entries, process payments, notify winners, and dispatch prizes.

Legitimate interests or legal obligation: to prevent fraud, keep the service secure, and maintain business records.

Consent: to send marketing emails if you opt in. You can unsubscribe at any time.

Payments

Where external provider checkout is enabled, payment details are processed by the configured provider, which may act as an independent controller for payment data. We receive tokens, metadata and payment status, not card numbers.

Sharing

We share personal data only with:

• The configured payment processor where provider checkout is enabled.
• Hosting, email and IT providers acting under contract.
• Law enforcement or regulators where required by law.

We do not sell personal data.

International transfers

Some providers may process data outside the UK. Where they do, we use appropriate safeguards such as the UK Addendum to EU SCCs or adequacy decisions.

Retention

Account and transaction data: up to 6 years after your last transaction for tax and audit purposes.

Winner verification and prize records: 6 years.

Support emails: 2 years.

Marketing consent data: while you are subscribed. We may retain a minimal suppression record after unsubscribe so your opt-out continues to be honoured.

Your rights under UK GDPR

You can access, rectify, erase, restrict, object, and request portability. You can withdraw consent at any time. To exercise these rights, email support@vaultcomps.co.uk. You can also complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies

We use only essential cookies necessary to run the site, such as reservation ownership, customer session, admin session, and security. We do not set analytics or marketing cookies without consent. If analytics are added later, this policy will be updated and a consent banner presented.

Age

This service is for UK residents aged 18 or over. We may request age or identity verification before awarding prizes.

Security

We use industry-standard security controls, including TLS, restricted access, and signed webhooks. No method is 100% secure; one-time sign-in links should never be shared or forwarded.